langfuse

SUSPICIOUS. The skill’s purpose is coherent, but its trust model is not: it asks users to install a third-party `langfuse-mcp` package and forward Langfuse credentials into it instead of using a same-org official Langfuse-distributed MCP binary/service. That provenance mismatch plus credential forwarding and access to sensitive trace data make the skill high risk even without confirmed malicious behavior.